$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa File: 2b654b1b-1b20-4e58-b50d-f23964f25963.roa (raw, json) Hash identifier: JnKcW+3i7K99gmrNHG8nnbIEDq+SqnbZYN3chPHmm/Y= Subject key identifier: 7C:5E:89:03:19:4D:53:78:2C:44:7D:7D:42:6D:D8:1D:F0:4F:7D:58 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2D26D597E6378DAB85620D7C77090603BED2BA09 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa Signing time: Fri 31 Oct 2025 02:00:08 +0000 ROA not before: Fri 31 Oct 2025 02:00:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:26:d5:97:e6:37:8d:ab:85:62:0d:7c:77:09:06:03:be:d2:ba:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 02:00:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2a18c2319f332be30a58445d2a4f3dbd491e0febc4fc18d2f72584417a094a8c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:73:ee:b7:eb:b3:68:2c:3b:c9:a4:82:34: 6d:e4:ba:c5:f6:30:48:07:a9:d3:02:4f:6a:cc:79: 2d:18:31:f9:10:fb:af:c2:37:6b:5e:13:ca:c1:db: b2:ff:21:fc:53:15:60:bd:0a:e0:58:8b:ed:d7:08: a1:22:90:c7:49:f2:ad:c2:ae:e8:73:33:e2:de:41: 84:33:ce:5e:09:d7:e1:e4:69:37:7d:8b:92:93:ec: f5:4f:4a:f1:75:a6:38:01:a2:94:5f:fb:47:74:19: 80:03:5e:45:45:7f:46:81:1f:6f:69:a1:b2:ad:11: 0d:a6:7e:6e:bc:7b:7d:b3:4a:68:24:99:27:41:0b: ac:9f:a3:df:22:fd:e3:26:c1:ef:e2:55:61:f3:b5: c8:7b:13:8d:71:75:15:d8:bc:1a:07:47:40:ef:8b: 65:2b:ae:bd:4b:43:fc:e6:2d:7c:56:53:c1:74:c8: 41:b8:3a:b2:63:c5:df:5a:1c:08:51:b7:8b:82:4f: f4:84:11:a0:b2:75:85:2d:87:e5:71:f6:7f:7c:c4: 96:49:1c:d3:9c:9e:f1:0b:fd:4f:62:24:c6:35:3f: f3:ec:61:84:47:ef:87:f6:10:9a:a7:1e:db:83:68: 90:74:76:43:71:54:de:fc:22:a4:75:bf:02:3d:8c: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5E:89:03:19:4D:53:78:2C:44:7D:7D:42:6D:D8:1D:F0:4F:7D:58 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6115::/48 Signature Algorithm: sha256WithRSAEncryption 99:8c:8d:c5:f6:5d:e0:8f:41:84:6a:b7:7b:5c:7e:26:1c:42: e6:fb:b5:86:f4:57:33:4c:49:04:82:9c:df:dc:22:dd:4a:9b: 39:36:29:ae:81:96:5d:51:36:5b:5c:28:cd:31:d5:7b:4e:7b: 86:27:89:82:47:bd:05:ae:d1:32:53:66:63:8c:d5:59:b8:94: c3:ce:89:6e:20:fe:b7:f4:6c:c5:ca:d8:ff:9c:b1:42:79:93: b8:75:a6:23:4b:79:a5:00:f0:4e:26:50:6f:3f:c6:cd:1f:8a: ed:ea:7b:3a:aa:ac:44:c6:7f:fd:04:ba:50:d7:c4:ef:c3:cc: db:74:5f:94:fa:0d:61:75:d9:b9:19:8d:18:c1:b8:ba:d8:d2: bc:b9:bb:e6:e1:3c:9e:a5:e3:58:a7:98:11:32:ab:6a:82:bc: 19:e3:ca:24:16:11:cb:a2:40:73:27:70:2c:68:b5:38:ec:49: 2d:b8:af:36:34:43:26:97:4b:0a:ef:04:9d:67:4b:8b:f7:ea: 22:34:89:c3:d8:98:78:ac:6b:01:f1:78:b1:26:4b:6a:9a:31: 93:bb:4a:c2:7b:c1:86:63:3a:de:c5:a2:fd:03:5b:14:10:3d: f5:b5:bb:74:2f:91:f7:bb:5a:78:78:80:8d:b6:4b:36:12:81: c3:41:74:33 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULSbVl+Y3jauFYg18dwkGA77SugkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDIwMDA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTE4YzIzMTlmMzMyYmUzMGE1ODQ0NWQyYTRmM2RiZDQ5 MWUwZmViYzRmYzE4ZDJmNzI1ODQ0MTdhMDk0YThjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWD3Put+uzaCw7yaSCNG3kusX2MEgHqdMCT2rMeS0YMfkQ +6/CN2teE8rB27L/IfxTFWC9CuBYi+3XCKEikMdJ8q3CruhzM+LeQYQzzl4J1+Hk aTd9i5KT7PVPSvF1pjgBopRf+0d0GYADXkVFf0aBH29pobKtEQ2mfm68e32zSmgk mSdBC6yfo98i/eMmwe/iVWHztch7E41xdRXYvBoHR0Dvi2Urrr1LQ/zmLXxWU8F0 yEG4OrJjxd9aHAhRt4uCT/SEEaCydYUth+Vx9n98xJZJHNOcnvEL/U9iJMY1P/Ps YYRH74f2EJqnHtuDaJB0dkNxVN78IqR1vwI9jKnLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfF6JAxlNU3gsRH19Qm3YHfBPfVgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiNjU0YjFiLTFiMjAtNGU1OC1iNTBkLWYyMzk2NGYyNTk2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRUwDQYJKoZIhvcNAQELBQADggEBAJmMjcX2XeCPQYRqt3tcfiYc Qub7tYb0VzNMSQSCnN/cIt1Kmzk2Ka6Bll1RNltcKM0x1XtOe4YniYJHvQWu0TJT ZmOM1Vm4lMPOiW4g/rf0bMXK2P+csUJ5k7h1piNLeaUA8E4mUG8/xs0fiu3qezqq rETGf/0EulDXxO/DzNt0X5T6DWF12bkZjRjBuLrY0ry5u+bhPJ6l41inmBEyq2qC vBnjyiQWEcuiQHMncCxotTjsSS24rzY0QyaXSwrvBJ1nS4v36iI0icPYmHisawHx eLEmS2qaMZO7SsJ7wYZjOt7Fov0DWxQQPfW1u3Qvkfe7Wnh4gI22SzYSgcNBdDM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:33 2025 by rpki-client